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Abstract. Let K be a number field and r an integer. Given an elliptic curve E, denned over 
K, we consider the problem of counting the number of degree two prime ideals of K with trace 
of Frobenius equal to r. Under certain restrictions on K, we show that "on average" the number 
of such prime ideals with norm less than or equal to x satisfies an asymptotic identity that is in 
accordance with standard heuristics. This work is related to the classical Lang- Trotter conjecture 
and extends the work of several authors. 



1. Introduction. 

Let E be an elliptic curve denned over a number field K. For a prime ideal *}3 of the ring of 
integers Ok where E has good reduction, we let am(E) denote the trace of the Frobenius morphism 
at It follows that the number of points on the reduction of E modulo *}3 satisfies the identity 

#Ey(0 K /¥) = MP + 1 - oq(E), 

where N*P := #(0^/^?) denotes the norm of It is a classical result of Hasse that 



\ay(E)\ < 20^. 

See |181 p. 131] for example. 

It is well-known that if p is the unique rational prime lying below *P (i.e., pTL = Zfl ^3), then 
Ok /^P is isomorphic to the finite field F / for some positive integer /. We refer to this integer / as 
the (absolute) degree of *p and write deg*p = /. Given a fixed elliptic curve E and fixed integers 
r and /, the classical heuristics of Lang and Trotter |14] may be generalized to consider the prime 
counting function 

n r /(x) := # {N<£ < x : w$(E) = r and deg^ = /} . 

Conjecture 1 (Lang- Trotter for number fields). Let E be a fixed elliptic curve defined over K , and 
let r be a fixed integer. In the case that E has complex multiplication, also assume that r / 0. Let 
f be a positive integer. There exists a constant &E,r,f such that 

*// = !, 

log log a; iff = 2, (1) 
1 i//>3 



(x) ~ € E ,r,f 



as x — t oo. 



Remark 2. It is possible that the constant &Erf ma y be zero. In this event, we interpret the 
conjecture to mean that there are only finitely many such primes. In the case that / > 3, we always 
interpret the conjecture to mean that there are only finitely many such primes. 
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Given a family of elliptic curves denned over K, by the average Lang-Trotter problem for 
we mean the problem of computing an asymptotic formula for 

We refer to this expression as the average order of 71^ (x) over < ^'. In order to provide support for 
Conjecture [TJ several authors have proven results about the average order of tt 7 ^ (x) over various 
families of elliptic curves. See [9J [5j (6J QTJ [2j [TJ [TJ [12]. In each case, the results have been found 
to be in accordance with Conjecture [TJ Unfortunately, at present, it is necessary to take ^ to be a 
family of curves that must "grow" at some specified rate with respect to the variable x. The authors 
of the works [9j [JJ IE] put a great deal of effort into keeping the average as "short" as possible. This 
seems like a difficult task for the cases of the average Lang- Trotter problem that we will consider 
here. 

In [1], it was shown how to solve the average Lang- Trotter problem when K/Q is an Abelian 
extension and ^ is essentially the family of elliptic curves defined by ([7]) below. It turns out that 
their methods were actually sufficient to handle some non- Abelian Galois extensions as well in the 
case when f = 2. In |12j . the results of |3] were extended to the setting of any Galois extension 
A'/Q except in the case that / = 2. In this paper, we consider the case when / = 2 and K/Q is an 
arbitrary Galois extension. We show how the problem of computing an asymptotic formula for 

may be reduced to a certain average error problem for the Chebotarev Density Theorem that may 
be viewed as a variation on a classical problem solved by Barban, Davenport, and Halberstam. We 
then show how to solve this problem in certain cases. Unfortunately, the techniques we present 
here do not solve the problem for an arbitrary Galois extension, but we do significantly extend the 
results of [4]. 
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3. An average error problem for the Chebotarev Density Theorem. 

For the remainder of the article it will be assumed that K/Q is a finite degree Galois extension 
with group G. Our technique for computing an asymptotic formula for the average order of tt 7 ^ (x) 
involves estimating sums of the form 

B(x;C,q,a) := ^ logp, 

p<x 
p=a (mod q) 

where the sum is over the primes p which do not ramify in K, (^—^j denotes the Frobenius class 

of p in G, and C is a union of conjugacy classes of G consisting entirely of elements of order two. 
Since the last two conditions on p under the sum may be in conflict for certain choices of q and a, 
we will need to take some care when attempting to estimate such sums via the Chebotarev Density 
Theorem. 
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For each positive integer q, we fix a primitive q-th root of unity and denote it by £ q . It is 
well-known that there is an isomorphism 

(Z/ 9 Z) X Gal(Q(C,)/Q) (2) 

given by a \— > a q ^ a where a q ^ a denotes the unique automorphism in Gal(Q(Q) /Q) such that <Jq y a{Cq) = 
Q q . By definition of the Frobenius automorphism, it turns out that if p is a rational prime, then 

= a Q) a if and only if p = a (mod q). See |20[ pp. 11-14] for example. More generally, 



V p 

for any number field the extension K(( q )/K is Galois, and under restriction of automorphisms of 
K(£ q ) down to Q(Cj) we have mappings 

Gal(K(Q/K) Gal(Q(C g )/Jf n Q(( q )) c > Gal(Q(C,)/Q). 

Therefore, via ([2]), we obtain a natural injection 

Gel(K (( q )/K ) C > (Z/gZ) x . (3) 

We let Gx,q denote the image of the map ([3]) in (Z/(/Z) x and (Pk(q) '■= ir~GK,q- Note that (fQ is the 
usual Euler (^-function. For a G Gx,q and a prime ideal p of if, it follows that ( K{C "J /K ) = cr q , a if 



and only if Np = a (mod g). 

Now let G' denote the commutator subgroup of G, and let K' denote the fixed field of G' . We will 
use the notation throughout the article. It follows that K' is the maximal Abelian subextension of K. 
By the Kronecker- Weber Theorem |131 p. 210], there is a smallest integer mx so that K' C Q(Cm K )- 
For every q > 1, it follows that K DQ(Cqm K ) = K'. Furthermore, the extension K((^ qmK )/Q is Galois 
with group isomorphic to the fibered product 

{(^1,0-2) G Gal(Q(C 9 „ x )/Q) x G : <n|^ = a 2 | X '}. 
See [SI pp. 592-593] for example. It follows that 

[K(Cq mK ) : Q] = = m(^K)n K , (4) 

where here and throughout we use the notation np := [F : Q] to denote the degree of a number 
field F. 

For each r G Gal(if'/Q), it follows from the above facts that there is a finite list S T of congruence 
conditions modulo mx (really a coset of Gk,m K in (^/ m _R"^) x ) such that for any rational prime not 
ramifying in K' , ( K ^ \ = r if and only if p = a (mod mk) for some a G S T . Now, suppose that r 



p 

has order one or two in Gal(-K"'/Q), and let C T be the subset of order two elements of G that restrict 
to r on K' , i.e., 

C r := {o" G G : g\k' = t and \a\ =2}. 

Since K' /Q is Abelian, it follows that C T is a union of conjugacy classes in G. Then for each 
a G (Z/gmi<-Z) x , the Chebotarev Density Theorem gives the asymptotic formula 

0(x; C T , qm K ,a) r x, (5) 

provided that a = b (mod mx) for some b G S T . Otherwise, the sum on the left is empty. For 
Q > 1, we define the Barban-Davenport-Halberstam average square error for this problem by 

qmK 1 ( #C \ 2 

£ K (x;Q,C T ) := V V' I 9{x;C,qm K ,a) — — — x) , (6) 



where the prime on the sum over a means that the sum is to be restricted to those a such that a = b 
(mod mk) for some b E S T . 

4. Notation and statement of results. 

We are now ready to state our main results on the average Lang- Trotter problem. Recall that 
the ring of integers Ok is a free Z-module of rank nx, and let B = {~fjYj=i De a h xe d integral basis 
for Ok- We denote the coordinate map for the basis B by 

3=1 

If A,B E then we write A < B if each entry of A is less than or equal to the corresponding 
entry of B. For two algebraic integers a, (3 E Ok, we write E a g for the elliptic curve given by the 
model 

E a>p :Y 2 = X 3 + aX + f3. 

We take as our family of elliptic curves the set 

V := <*f(A; B) = {E a> p : -A < [a] B < A, -B < \p\ B < B, -16(4a 3 + 27/3 2 ) ^ 0}. (7) 

To be more precise, this box should be thought of as a box of equations or models since the same 
elliptic curve may appear multiple times in c €. For 1 < i < h-k, we let dj denote the i-th entry of A 
and bi denote the i-th entry of B. Associated to box we define the quantities 

"K "K 

ViC*f) := 2»* J[ ai , V 2 (<*f) ■= ^Hh, 

i=\ i=l 
mini(^) := min {o^}, mh^^*) := min {bi}, 

V(^) := Vi(^)V 2 (^), minCT) := min{mini(^), min 2 (^)}, 

which give a description of the size of the box c € . In particular, 

#^ = Vtff) + o ( 

\mm( i5 ) 

Our first main result is that the average order problem for 7r^ 2 (x) may be reduced to the Barban- 
Davenport-Halberstam type average error problem described in the previous section. 

Theorem 3. Let r be a fixed odd integer, and recall the definition of £k(x;Q,C t ) as given by ([6]). 

12 - - x 



£ K (x;x/(logx) 12 ,C T ) < 



(log x) 11 

for every r of order dividing two in G&\(K' /Q), then provided that min('^ 7 ) > \fx, 

Yl ^E^) = £isr,r,2loglogx + 0(l), 
where &K,r,2 is the constant given by 

*™ - n n e *c* e n w 



|t|=1,2 £f2r 



and &i T ' g ^ is defined by ([29]) on page [75l 



Remark 4. We have chosen to restrict ourselves to the case when r is odd since it simplifies some 
of the technical difficulties involved in computing the constant &K,r2- A result of the same nature 
should hold for even r as well. 

Remark 5. In all of our computations, the number field K and the integer r are assumed to be fixed. 
We have not kept track of the way in which our implied constants depend on these two parameters. 
Thus, all implied constants in this article may depend on K and r even though we do not make this 
explicit. 

The proof of Theorem [3] proceeds by a series of reductions. We make no restriction on the number 
field K except that it be a finite degree Galois extension of Q. In Section [6j we reduce the proof 
of Theorem [3] to the computation of a certain average of class numbers. In Section [7J we reduce 
that computation to a certain average of special values of Dirichlet L-functions. In Section [HJ the 
problem is reduced to the problem of bounding £k(x; Q,C t ). Finally, in Section [9j we compute the 
constant £-K,r,2- 

Under certain conditions on the Galois group G = G&1(K/Q), we are able to completely solve our 
problem by bounding £k(x;Q,C t ). One easy case is when the Galois group G is equal to its own 
commutator subgroup, i.e., when G is a perfect group. In this case, we say that the number field K 
is totally non-Abelian. The authors of [1] were able to prove a version of Theorem [3] whenever G is 
Abelian. That is, when the commutator subgroup is trivial, or equivalently, when K = K' . It turns 
out that their methods are actually sufficient to handle some non-Abelian number fields as well. In 
particular, their technique is sufficient whenever there is a finite list of congruence conditions that 
determine exactly which rational primes decompose as a product of degree two primes in K. Such 
a number field need not be Abelian over Q. For example, the splitting field of the polynomial x 3 — 2 
possesses this property. If K is a finite degree Galois extension of Q possessing this property, we 
say that K is 2- pretentious. The name is meant to call to mind the notion that such number fields 
"pretend" to be Abelian over Q, at least as far as their degree two primes are concerned^! 

In Section [TUJ we give more precise descriptions of 2-pretentious and totally non-Abelian number 
fields and prove some basic facts which serve to characterize such fields. Then, in Section [Til we 
show how to give a complete solution to the average order problem for 7r^ 2 (x) whenever K may 
be decomposed K = K1K2, where K\ is a 2-pretentious Galois extension of Q, K2 is totally non- 
Abelian, and Ki n K 2 = Q. 

Theorem 6. Let r be a fixed odd integer, and assume that K may be decomposed as above. Then 
provided that min(^) > y/x, 



where £x,r,2 is the constant given by (|5|). 

By a slight alteration in the method we employ to prove Theorem [3l we can also provide a 
complete solution to our problem for another class of number fields. 

Theorem 7. Let r be a fixed odd integer, and suppose that K' is ramified only at primes which 
divide 2r. Then there exists a constant ^K,r,2 such that 



We borrow the term pretentious from Granville and Soundararajan who use the term to describe the way in 
which one multiplicative function "pretends" to be another in a certain technical sense. We borrow the term as an 





homage. 
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provided that min^) > y/x. Furthermore, the constant £x,r,2 ma V be explicitly written as 



3- t^-m-{=t)r 

where the product is taken over the rational primes I > 2 and C = {a G Gal(if/Q) : |cr| = 2}. 

Remark 8. We note that the required growth rate min(^) > yfx for Theorems [3l[6j [7] can be relaxed 
to min(^) > -^/x/logx. The key piece of information necessary for making the improvement is to 
observe that (see page [5]) can be improved to %(T) <C j^pf, where %{T) is the sum defined 
by {HP - Indeed, the techniques used to prove Propositions 1141 and 1151 below can be used to show 
that TL(T) is asymptotic to some constant multiple of y^pf • 

Following |BJ, we also obtain an easy result concerning the average supersingular distribution of 
degree two primes. To this end, we define the prime counting function 

-K S g 2 (x) := #{N*P < x : E is supersingular at *P, deg*P = 2}. 

Recall that if *}3 is a degree two prime of K lying above the rational prime p, then E is supersingular 
at *p if and only if a<$(E) = 0, ±p, ±2p. By a straightforward adaption of [6l pp. 199-200], we obtain 
the following. 

Theorem 9. Let K be any Galois number field. Then 

1 0,2, 

provided that min^) > log log x, and 



1 ss,2/ s #C 
> TT^ (X) ~ 



w E ' (x) ~ — — log log X 
provided that minC^ 7 ) > y/x/logx. Here, C = {a € Gal(if/Q) : |<r| = 2}. 



Since the proof of this result merely requires a straightforward adaptation of [6] pp. 199-200], we 
choose to omit it. 

5. Counting isomorphic reductions. 

In this section, we count the number of models E £ ^ that reduce modulo *p to a given isomor- 
phism class. 

Lemma 10. Let *P be a prime ideal of K and let E' be an elliptic curve defined over Ox/ty- Suppose 
that deg «P = 2 and \ 6. Then 

_ Vflf) / V(g) Vftf) V(g) 

fft ^ 1 N<p#Aut(£') VN^ 2 min(^)vW mim (^) min 2 (^) 

Proof. Since degp = 2, the residue ring O^/^P is isomorphic to the finite field F p 2, where p is the 
unique rational prime lying below Since f 6, the characteristic p is greater than 3. Hence, E' 
may be modeled by an equation of the form 

E afi :Y 2 = X 3 + aX + b 

for some a,b £ Ox/ty- The number of equations of this form that are isomorphic to E' is exactly 

p 2 - 1 N<p - 1 

#Aut(£') ~ #Aut(£') ' 



Therefore, 



NQ3 — 1 

#{£^:^ = E'} = # * ut(E/) #{E G <*f : = E a>b }, 



Suppose that E £ such that Em = E a ^, say E : Y 2 = X 2 + aX + /3. Then either a = a 
(mod ^3) and /3 = b (mod ^3) or E a g is not minimal at If E is not minimal at then *}3 4 | a 
and *p 6 | /3. For a, 6 G Ox/ty, we adapt the argument of [H p. 192] in the obvious manner to obtain 
the estimates 

#{a e K : -A < [«]« < A, a = a (mod „)} = + O (-^^ ) , 

#0 e % : -B < m < B, a = b ( m od <P)} = + O ■ 

It follows that 

MFG r-F -f i - i r? ( v(<r) i i v( ^ } ^ 

^ " * aM N¥ 2 + ^ Vmin(^)N^3/2 + miril (^) m in 2 (^)N^ + N^ 1 " J ' 

where the last term in the error accounts for the curves which are not minimal at □ 

6. Reduction of the average order to an average of class numbers. 

In this section, we reduce our average order computation to the computation of an average of 
class numbers. Given a (not necessarily fundamental) discriminant D < 0, if D = 0, 1 (mod 4), we 
define the Hurwitz-Kronecker class number of discriminant D by 

k 2 \D y ' ' 

^=0,1 (mod 4) 

where h{d) denotes the class number of the unique imaginary quadratic order of discriminant d and 
w(d) denotes the order of its unit group. 

A simple adaption of the proof of Theorem 4.6 in |17| to count isomorphism classes with weights 
(as in |15[ p. 654]) yields the following result, which is attributed to Deuring [7j. 

Theorem 11 (Deuring). Let p be a prime greater than 3, and let r be an integer such that p \ r 
and r 2 — Ap 2 < 0. Then 

Y = H(r 2 - Ap 2 ), 

^ #Aut(£) 

E/W p2 
#E(¥ p2 )=p 2 +l-r 

where the sum on the left is over the ¥ p 2 -isomorphism classes of elliptic curves possessing exactly 
p 2 + 1 — r points and #Aut(E) denotes the size of the automorphism group of any representative of 
E. 

Proposition 12. Let r be any integer. 7/min('^ 7 ) > \fx, then 

1 V- r,2, s n K ^ H(r 2 -4p 2 ) 

E&£ 3\r\<p<y/5 
f K {p)=2 

where the sum on the right is over the rational primes p which do not ramify and split into degree 
two primes in K. 

Remark 13. We do not place any restriction on r in the above, nor do we place any restriction on 
K except that the extension K/Q be Galois. 

7 



Proof. For each £ 6 we write 7r^ 2 (x) as a sum over the degree two primes of K and switch the 
order of summation, which yields 



^E^ 2 (*) = ^ E £ 1= E 

^ E&S ~ N<$<x E&? Ny$<x 

deg i p=2 a, v (E)=r deg<p=2 



E/{o K m 

a v (E)=r 



where the sum in brackets is over the isomorphism classes E of elliptic curves defined over Ok/^ 
having exactly N*}3 + 1 — r points. 

Removing the primes with N*p < (3r) 2 introduces at most a bounded error depending on r. For 
the primes with N*P > (3r) 2 , we apply Theorem 1111 and Lemma [TUl to estimate the expression in 
brackets above. The result is equal to 

H(r 2 - 4N<}3) 



+ O H{r 2 - 4N«p) 



1 1 1 

+ . — === + 



N«p 2 mm( ( tf)^/W^ min^tf) min 2 (^) 



(10) 



Summing the main term of (fTUl) over the appropriate ^ gives 

H{r 2 - 4N<£) _n K ^ H(r 2 - Ap 2 ) 
^ INTO ~ T ^ p 2 ' 

(3r) 2 <N<p<z 3\r\<p<^x 
deg<p=2 /if(p)=2 

where the sum on the right is over the rational primes p which split into degree two primes in K. 
To estimate the error terms, we proceed as follows. For T > 0, let 

H(T):= £ H(r 2 -4p 2 ). (11) 

3\r\<p<T 

Given a discriminant <i < 0, we let Xd denote the Kronecker symbol (-). The class number formula 
states that 

hid) Idl 1 / 2 , 

W(a) Z7T 

where L(l,x c ;) = ^n=i X< * ^ ■ Thus, the class number formula together with the definition of the 
Hurwitz-Kronecker class number implies that 

n (T)«Y,l E plogP<TlogT^ 1 £ 1 

fc<2T 3|r|<p<T fe<2T 3|r|<p<4T 

fc 2 |r 2 — 4p 2 k\r 2 — 4p 2 

<™^Ei E E i- 

fc<2T ae(Z/fcZ) x P<4T 

4a 2 =r 2 (modfc)P= a (mod fc) 

We apply the Brun-Titchmarsh inequality |10| p. 167] to bound the sum over p and the Chinese 
Remainder Theorem to deduce that 

#{a € (Z/fcZ) x : 4a 2 = r 2 (mod k)} < 2^ k \ 

where uj(k) denotes the number of distinct prime factors of k. The result is that 

up) « T 2 io g r y, z ,J, firm THogT E h (u\ l t at\ « y2 - ( 13 ) 

fc<2T fe< ^) log(4T/A;) ^ fcy>(&) log(4T) 



From this, we deduce the bounds 



and 



(3r) 2 <NCp<iE 3|r|<p<V^ 
deg <p=2 

^ (r 2 - 4Ny) ^ H(r 2 - Ap 2 ) _ dU(T) r 

(3r) 2 <N<p<:z V V 3|r|<p<^ 11 
deg<p=2 

H(r 2 -AN^) ^ H(r 2 -Ap 2 ) dH(T) 



E ii V n yi - *p j _ i u.ny± j 



(3r) 2 <N^P<z ' 3\r\<p<^x 

deg<P=2 

Using these estimates, it is easy to see that summing the error terms of (jlOp over *P yields a bounded 
error whenever min(^) > \fx. □ 

7. Reduction to an average of special values of Dirichlet L-functions. 

In the previous section, we reduced the problem of computing the average order of 7r^ 2 (x) to that 
of computing a certain average of Hurwitz-Kronecker class numbers. In this section, we reduce the 
computation of that average of Hurwitz-Kronecker class numbers to the computation of a certain 
average of special values of Dirichlet L-functions. Recall that if x is a Dirichlet character, then the 
Dirichlet L-function attached to x i s given by 



L(s, X ) :=£ 



X{n) 



n=i 



for s > 1. If X i s n °t trivial, then the above definition is valid at s = 1 as well. As in the previous 
section, given an integer d, we write Xd for the Kronecker symbol (-). We now define 

A K)2 (T;r) := I L (l,x dk{p 2 } ) logp, (14) 

k<2T 3\r\<p<T 
(*,2r)=l f K ( P )=2 
k 2 \r 2 -4p 2 

where the condition fx(p) = 2 means that p factors in K as a product of degree two prime ideals 
of Ok, and we put dk(p 2 ) '■= (r 2 — Ap 2 )/k 2 whenever k 2 \ r 2 — Ap 2 . 

Proposition 14. Let r be any odd integer. If there exists a constant £.' K 2 such that 

A K AT;r) = €' K>r>2 T + o(^y 

then 

uk sr^ H(r 2 — Ap 2 ) ^ . 

3|r|<p<Va 
/k(p)=2 

where £ K ,r,2 = ^&K,r,2- 

Proof. Combining the class number formula (|12p with the definition of the Hurwitz-Kronecker class 
number, we obtain the identity 



n K ^ H{r 2 - Ap 2 ) n K ^ ^ yjAp 2 - r 2 , , , . 

3\r\<p<^/x 3\r\<p<^x k 2 \r 2 -4p 2 

/if(p)=2 Ik(p)=2 d k (p 2 )=Q,l (mod 4) 
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By assumption r is odd, and hence r 2 — Ap 2 = 1 (mod 4). Thus, if k 2 \ r 2 — Ap 2 , it follows 
that k must be odd and k 2 = 1 (mod 4). Whence, the sum over k above may be restricted to odd 
integers dividing r 2 — Ap 2 and the congruence conditions on dk{p 2 ) = (r 2 — Ap 2 )/k 2 may be omitted. 
Furthermore, if I is prime dividing (k,r) and k 2 \ r 2 — Ap 2 , then 

= r 2 - Ap 2 = -{2pf (mod I 2 ), 

and it follows that I = p. This is not possible for p > 3|r| since the fact that I divides r implies 
that i < r. Hence, the sum on k above may be further restricted to integers which are coprime to r. 
Therefore, switching the order of summation in (|15p and employing the approximation W Ap 2 — r 2 = 
2p + O (1/p) gives 

u_k_ ^ H ^ 2 ~ _ nK ^ - Yl L ( 1,Xdk(p2 ^ | Q(l) 

^ 3\r\<p<^x P ^ k<2^/x ^ 3|r|<p<Vi ^ 

f K (p)=2 (*,2r)=l f K (p)= 2 

k 2 \r 2 -Ap 2 

With AKfi{T;r) as defined by ([14|) . the right hand side is equal to 

1 _ L(l,x dfc(p2) ) _ nK f^dA K ^T-r) 



2tt ^ k p 2vr J, M TlogT 

(fc,2r)=l /k(p)=2 
k 2 \r 2 — Ap 2 



By assumption, AK^{T;r) = £' Kr2 T + 0(T/ log T). Hence, integrating by parts gives 

n K dA K<2 (T;r) _ n K ^ 

k\r\ 

□ 



2tt 



J3|r| TlogT 2vr 



8. Reduction to a problem of Barban-Davenport-Halberstam Type. 

Propositions [T3] and [T5] reduce the problem of computing an asymptotic formula for 



1 r,2. 



to the problem of showing that there exists a constant £^ 2 such that 

^(T;r)= \ E ^(l,Xd fc ( p2 ))logp = ^, r , 2 T + 0(T/logT). (16) 

fc<2T 3|r|<p<T 
(fc,2r)=l / Jr (p)=2 
fc 2 |r 2 — Ap 2 

In this section, we reduce this to a problem of "Barban-Davenport-Halberstam type." 

Since every rational prime p that does not ramify and splits into degree two primes in K must 
either split completely in K' or split into degree two primes in K' , we may write 

A K;2 (T;r)= ^ A K>T {T;r), 

reGal(X7Q) 
M = l,2 
10 



where the sum runs over the elements r S Gal(-ftf'/Q) of order dividing two, Ak,t{T\v) is defined 
by 

A KtT {T-r):= T Yl L C 1 ' *Mp 2 )) 1o 



k 

k<2T 3\r\<p<T 
(fc,2r)=l /ic/Q^ cc 



(17) 



fc 2 |r 2 -4p 2 

and C r is the subset of all order two elements of Gal(K/Q) whose restriction to K' is equal to r. 
Thus, it follows that (|16|) holds if there exists a constant such that 

A K:T (T,r) = £^T + 0(T/logT) 

for every element t £ Gal(X'/Q) of order dividing two. 

Proposition 15. Lei r be a fixed odd integer, let r be an element of Gal(K' /Q) of order dividing 
two, and recall the definition of £k(x;Q,C t ) as given by ([6]). If 

£ x (T;T/(logT) 12 ,C r )< 



then 
where 

(r) 2 # C r 



A K)T (T;r) = ^T + 



(logT)H' 
T 



logly ' 



(18) 
(19) 



n ( « r-i^ ) x i. 



E 



t\r V V i )} 9 eS T k=l n=l " ' adCL/n. 

(fc,2r)=l (n,2r)=l 



7? 



#C g (r,a,n,k) 



(20) 



and 



C g (r,a,n,k) := {z € (Z/ 'm^nA; 2 Z) x : 4z 2 = r 2 — afc 2 (mod n/c 2 ), 2 = 6 (mod mx)} . 
Proof. Suppose that d is a discriminant, and let 

Sd(y) ■= *d{n). 

n<y 
(n,2r)=l 

Burgess' bound for character sums O Theorem 2] implies that 

X^W«y 1/2 M 7/32 - 

Since r is a fixed integer, we have that 



\s d (y)\ 



m\2r n<y 
m\n 



1/2, .i7/32 



where the implied constant depends on r alone. Therefore, for any U > 0, we have that 

Xdiji) 



E 

n>U 
(n,2r)=l 



dS d (y) <<: M 7/32 



n 



u 



(21) 



Now, we consider the case when d = dk{p 2 ) = (r 2 — Ap 2 )/k 2 with (k,2r) = 1 and p > 3|r|. Since 
r is odd, it is easily checked that Xd k (p 2 ){^) = (§) = — 1) an d Xd k (p 2 )(£) = f° r an y P r i me ^ 

dividing r. Therefore, we may write 



^ / n=l 

(n,2r)=l 



n / n 

n=l 



Since we also have the bound \dk(p 2 )\ < (2p/k) 2 , (|2ip implies that 

fir V / fc<2T n<E/ 3M<p<T V 7 V V , 



\r\<p<T 

(fe,2r)=l (n,2r)=l ^ K /Q^cC, 
fc 2 |r 2 — 4p 2 



For any V > 0, we also have that 

E I E ; E (^)iog P «iogri„ gC , £ I yj i, 

V<fc<2T n<£/ 3|r|<p<T V 7 V<fc<2T m<T 

(fe,2r)=l (n,2r)=l f£/Q\ cc (fc,2r)=l fc 2 |r 2 -4m 2 



fc 2 |r 2 -4p 2 

where the last sum on the right runs over all integers m <T such that k 2 \ r 2 — Am? . To bound the 
double sum on the right, we employ the Chinese Remainder Theorem to see that 



/ / A: ^ ^ y k J ^ ^ k 

V<k<2T m<T V<k<2T m<2T V<k<2T 

(fc,2r)=l k 2 \r 2 -Am 2 (fc,2r)=l k\r 2 -Am 2 (k,2r)=l 



2"(*) f°° dN(y) TlogV 

^— ' A; 2 Jv V V 

V<k<2T JV y 

where w(/c) is the number of distinct prime divisors of k and iV(y) = T,k<y 2 ^ k) < yiogy- See pU 
p. 68] for example. Therefore, since including the primes p < 3\r\ introduces an error that is 
O (log [/log V), we have 

^Hn^) E i E i E 

£|r \ \ £ / / k<V n<U p<T V 7 

(fe,2r)=l (n,2r)=l ^/QV C 



v 

k 2 \r 2 -4p 2 



( T 23/w TlogTlog^logy \ 
+ O I ^_ + - + log UlogVJ. 
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If n is odd, the value of - J depends only on the residue of d^p 2 ) modulo n. Thus, we may 

regroup the terms of the innermost sum on p to obtain 

^mo-§n(7T73y) E s E I E Q E 

£|r V W ;/ fc<v „<[/ ae(Z/nZ) x p<T 



(fc,2r)=l (n,2r)=l ( K/Q )cC, 



p 



/ T 23/i6 TlogTlogC/logF , rrl ' 
+ I — + 2 ^ §_ + l ogC /l og y 



4p 2 =r 2 —ak 2 (mod nk 2 ) 



Suppose that there is a prime p \ nk 2 and satisfying the congruence Ap 2 = r 2 — ak 2 (mod nk 2 ). 
Since (k,r) = 1, it follows that p must divide n. Therefore, there can be at most O(logn) such 
primes for any given values of a, k and n. Thus, 



A KtT (T;r) = ln( 

t\r \ 



('. 



x E I E n E © E E l °zp 

k<V n<U ae(Z/nZ)x b&(Z/nk 2 Z) x P<T (22) 

(fe,2r)=l (n,2r)=l 4fe 2 =r 2 -afc 2 (mod nfc 2 ) (^)cC T 

p=b (mod nk 2 ) 

f T 23 / ie T log T log [/logy \ 
+ O — H 77 h C/ log U log K . 

\ Vu v J 



We now make the choice 

u = (i^rp (23) 

V-(logT) 4 . (24) 

Note that with this choice the error above is easily 0(T/ log T). 

Recall the definitions of C T and S T from Section [3j Then every prime p counted by the innermost 
sum of (|22p satisfies the condition that ( K ^ ) = r, and hence it follows that p = g (mod m#) for 



p 

some g £ S T . Therefore, we may rewrite the main term of (l22l) as 

infir^E E I E i E © E ^;<w„0). 

€|r \ W ;/ 9 e5 T fc<V n<(7 ae(Z/nZ) x fee(Z/ mK nfc 2 Z) x 

(fc,2r)=l (n,2r)=l 4fe 2 =r 2 -afc 2 (mod nk 2 ) 

b=g (mod mx) 

(25) 

In accordance with our observation in Section [3j the condition that b = g (mod up) ensures that 
the two Chebotarev conditions Q C T and p = b (mod m^nk 2 ) are compatible. Therefore, 



we choose to approximate (J25J) by 

^U(jzj^)E E £ E E ©#c.(r, «,»■*>, w 

A £|r \ W V 9ei S T k<V n<U n ' ae(Z/nZ)x 

(fc,2r)=l (n,2r)=l 

where C g (r,a,n, k) is as defined in the statement of the proposition. 
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For the moment, we ignore the error in this approximation and concentrate on the supposed 
main term. The following lemma whose proof we delay until Section [12] implies that the expression 
in PBJ is equal to (J^T + 0(T/ log T) for U and V satisfying (|23J and §2A 

Lemma 16. With Cf^ as defined in (j2"Uj) . we have 



3« 



K 



1 



+ 



log!/ 



1 



E 



geS T k<V n<U v " ' ae(Z/nZ 

(fc,2r)=l (n,2r)=l 



/I 



#C g (r,a,n,k) 



Vu V 2 



We now consider the error in approximating (|25j) by (I26p . The error in the approximation is 
equal to a constant (depending only on K and r) times 



geS T k<V 
(fc,2r)=l, 

n<[7 
(n,2r)=l 



ae(Z/nZ)> 



£ (e(T;C T ,m K nk 2 ,b) 



bEC g (r,a,n,k) 



nK 



ip K {m K nk 2 ) 



T . 



We note that for each b G (Z/m^n/c Z) x , there is at most one a G (Z/nZ) x such that aAr = 46 — r 
(mod refc 2 ). Therefore, interchanging the sum on a with the sum on b and applying the Cauchy- 
Schwarz inequality, the above error is bounded by 

1/2 



y 1 - 



E 

n<(7 



1/2 



E E 



#(T; C T , niKnk 2 , b) 



ip K (m K nk 2 ) 



T 



b=g (mod mx) 
We bound this last expression by a constant times 

Vy/fo£Uy/£ K (T;UV 2 ,C T ), 

where £x(T; UV 2 ,C T ) is defined by ([6]). Given our assumption (|18p and our choices (|23p and ([2 
for J7 and V, the proposition now follows. 



□ 



9. Computing the average order constant for a general Galois extension. 

In this section, we finish the proof of Theorem [3] by computing the product formula ([8]) for the 
constant (tx, r ,2- It follows from Propositions [T2j [MJ and [Tol that 



<r - nK (r' 



where 



(t) 

and (Lr is defined by 



reGal(if'/Q) 
|r|=l,2 



r) 



3nK 



— 1 h2\ J2 (-)#C g (r,a,n,k). 

g&Sr k=l n=l ^ v " > a€(Z/nZ) x 

(fc,2r)=l (n,2r =1 V ' ; 
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For each g G S T , we define 



oo 1 oo 

«*">=- E I E 



1 



k=l n=l 'a 

(fc,2r)=l (n,2r)=l 



E Q#C 9 (r,a,n,fc) 



(27) 



so that 



ay) E & 

t I ) geS T 



It remains then to show that 



n 



^2r 



(28) 



where 



V ,. 



^(4g 2 -r 2 ) + l 



(£-1) 



-+i 



+ 

v-^-i) r 



(r 2 -4g 2 ) f 



2 r ^(-K) i 1 1 / r ^.(-x) i 
rl 2 l + (i + i) (il 2 I 



(r 2 -4g 2 ) £ 
1 I _|_ £^(»>j<r)+2 



if ^(V - r 2 ) < ut(m K ), 2 f ^(V - r 
if z^(4 5 2 - r 2 ) < 2 | u e (4g 2 - r 

if ^(45 2 - r 2 ) > i^(ffiif). 



(£ 2 - 1) 



(29) 

Remark 17. The notation z^(4g 2 — r 2 ) is a bit strange as g is defined to be an element of (Z/m^Z) x . 
This can be remedied by choosing any integer representative of g, and noting that any choice with 
vi(\g 2 — r 2 ) > viimK) corresponds to the case that Ag 2 = r 2 (mod l v ^ mK ">) . 



By the Chinese Remainder Theorem and equation @ 

oo 1 oo _. 

k=l n=l 
(fc,2r)=l (n,2r)=l 



, / ,2> E (~) #C g (r,a,n,k) 

k=l n=l r " v ; ae(Z/nZ)x 



x. x 

E z E 



/, / — ' a pimKnk 2 ) (re) n ^ s ( ' ' ' )' 

1 , n=l . v y ae(Z/nZ) x £| m _ft:nfc 2 



(fc,2r)=l (n,2r)=l 

where the product is taken over the distinct primes I dividing m^nk 2 , 

C^(r,a,n,k) := {& G (Z/e^' K ^Z) x : 46 2 = r 2 - a*; 2 (mod r^ n ^),6= g (mod f f(mK) )} , 

and f£ is the usual £-adic valuation. With somewhat different notation, the following evaluation of 
#Cg (r,a,n,k) can be found in [3]. 

Lemma 18. Let k, m, and re be positive integers satisfying the condition (nk, 2r) = 1. Suppose that 
£ is any prime dividing m^nk 2 . If l \ mx, then 

'l+^r!^ ifi\r 2 -ak 2 , 

otherwise; 
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#C^(r,a,n,k) 



if £ | m-K, then 



( gmm{u e (nk 2 ),u e (m K )} ^ 4 2 _ r 2 _ ffl ^2 f mQ ^ gmin{u e (nk 2 ),u e (m K )}\ 

#Cjj '(r, a,n,k) = < 

y otherwise. 



In particular, 

#Cf (r,l,l,fc) = <| 



2 if £\k and I \ m-K, 

£ min{2^(fc),^( mK )} | mK ond V = r 2 (mod ^in{2^(fc),^(-x)}) 5 
otherwise. 



By Lemma [181 we note that if £ is a prime dividing m-K and £ does not divide nk, then #Cg (r,a,n,k) 
1. We also see that #cjf\r, a, n, k) = if (r 2 — ak 2 ,n) > 1. Finally, if £ | /c and £ f n, then 

#Cf (r,a,n,k) = #cW (r,l,l,fc) 

as viink 2 ) = 2vi(k) in this case. Therefore, using the formula ip(mn) = (p(m)(p(n)(m, n) / ip((m, n)) , 
we have 

1 oo p((«,»Jr*))IL[fc#cf (r, M, A;) 

Rif ^ k 2 ip(m K k) ^ nip(n)(n,m K k) 

(fc,2r)=l (n,2r)=l 

„ V((n,»^))m|fc#Cf (r,l,l,fc) 



W^k) ~ (m K ,k)k 2 ip(k) ^ n(f(n)(n,m K k) 

(fc,2r)=l (n,2r)=l 

y, M( m K, k)) Ue\k #C ( g e) (r, 1, 1, fc) » c fc (n) 



(»*,*)fcM*0 ^ n^nJCn^KA;)^,^ } #C^(r, 1,1, A;)' 

(n,2r)=l U ' ; 

(30) 

Here Cfc(n) is defined by 

(%(n):= ^ {^)\{#Cf\r,a,n,k), (31) 

ae(Z/nZ) x <|n 
(r 2 — afc 2 ,n)=l 

for (n, 2r) = 1, and the prime on the sum over k is meant to indicate that the sum is to be restricted 
to those k which are coprime to 2r and not divisible by any prime £ for which #cf\r, 1, 1, k) = 0. 

Lemma 19. Assume that k is an integer coprime to 2r. The function Cfc(n) defined by equation (I3ip 
is multiplicative in n. Suppose that £ is a prime not dividing 2r. If £ \ km-x, then 

Ck(n = j£-3 i/2 | e, 
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If £ | kmpc, then 



^ = #Cf(r,l,M) 



1 i/2 | e, 
i/2fe 



in the case that u^mx) < 2vi(k); and 



^-^(r.l.Ulf "'-^ )' 



m £/ie case i/iai 2vi{k) < v^{mK)- Furthermore, for (n,2r) = 1, we have 

, .. Ae\(n,k)' 

c k (n) < 



K BJ( (^) 

where for any integer N , K]\r(n) is the multiplicative function defined on prime powers by 

I 1 otherwise. 

Remark 20. Lemma [19] is essentially proved in [4], but we give the proof in Section [12] for complete- 
ness. 

Using the lemma and recalling the restrictions on k, we factor the sum over n in (|30p as 

<p((n, m K k))c k {n) 



E 

n=l 
(n,2r)=l 



»: j n ^(^)(^,'»xfc)n£i(fc,„)# c 'f ) ( r ) i > 1 ^) 



n 

0j2rm K k 



E 

e>0 



c fc (l e ) 



n 

(^2r) 



e>l 



£^)#cf (r,l,M) 



n w> n f i (9) ^^) 



n wn^cnn 5 ^ n 

(£{2r) 



£|2r 



(£{2r) 



where for any odd prime £, we make the definitions 



F (£) := 1 



F-f (*,*;) := { 



(£-l) 2 (£+l)' 

1 + 



if 2v i {k) < v t {m K ) and Ag 2 = r 2 (mod ^( fc )), 



1 + 



1 if 2vi(k) > vt{m K ) and 4o 2 = r 2 (mod 
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Substituting this back into (|30p and factoring the sum over k, we have 

^"=-£3 n wn^'i 

£\2r 

( Fl (i,n^ in \ tt A , v (i-i)#c/W,i,m (3) (^ e ) 

Using Lemma [18] and the definitions of Fq (£) and i* 1 ^ (£, k) to simplify, we have proved (|28p . 

10. Pretentious and totally non-Abelian number fields. 

In this section, we give the definitions and basic properties of pretentious and totally non-Abelian 
number fields. 

Definition 21. We say that a number field F is totally non-Abelian if F/Q is Galois and Gal(F/Q) 
is a perfect group, i.e., G&1(F/Q) is equal to its own commutator subgroup. 

Recall that a group is Abelian if and only if its commutator subgroup is trivial. Thus, in this 
sense, perfect groups are as far away from being Abelian as possible. However, we adopt the 
convention that the trivial group is perfect, and so the trivial extension (F = Q) is both Abelian 
and totally non-Abelian. The following proposition follows easily from basic group theory and the 
Kronecker- Weber Theorem |13^ p. 210]. 

Proposition 22. Let F be a number field. Then F is totally non-Abelian if and only if F is linearly 
disjoint from every cyclotomic field, i.e., F n Q(Cg) = Q f or every q > 1. 

Definition 23. Let / be a positive integer. We say that a number field F is f -pretentious if 
there exists a finite list of congruence conditions Jzf such that, apart from a density zero subset 
of exceptions, every rational prime p splits into degree / primes in F if and only if p satisfies a 
congruence on the list Jzf . 

If F is a Galois extension and f \ np, then no rational prime may split into degree / primes in F. 
In this case, we say that F is "vacuously" /-pretentious. In this sense, we say the trivial extension 
(F = Q) is /-pretentious for every / > 1. The term pretentious is meant to call to mind the notion 
that such number fields "pretend" to be Abelian over Q, at least in so far as their degree / primes 
are concerned. Indeed, one can prove that the 1-pretentious number fields are precisely the Abelian 
extensions of Q, and every Abelian extension is /-pretentious for every / > 1 (being vacuously 
/-pretentious for every / not dividing the degree of the extension) . 

Proposition 24. Suppose that F is a 2-pretentious Galois extension of Q, and let F' denote the 
fixed field of the commutator subgroup of G&1(F/Q). Let r be an order two element of G&\(F' /Q), 
and let C T be the subset of order two elements of G = G&\(F/Q) whose restriction to F' is equal to 

t. Then for any rational prime p that does not ramify in F, we have that ( — ^ ) = r if and only 



if p = g (mod mp) for some g £ S T if and only if y~^r~j — Cr- 

Proof. In Section [3] we saw that the first equivalence holds. Indeed, this is the definition of S T . 
Furthermore, if (^—^J Q C T , then ( —^ J = ^""^^ = T > an d so p = g (mod mp) for some 

g £ S T . Thus, it remains to show that if p = g (mod mp) for some g £ S T , then ^—^^ Q C T . 

Since F is 2-pretentious, there exists a a finite list of congruences Jz? that determine, apart from 
a density zero subset of exceptions, which rational primes split into degree two primes in F. Lifting 
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congruences, if necessary, we may assume that all of the congruences on the list Jzf have the same 
modulus, say m. Lifting congruences again, if necessary, we may assume that mp \ m. Since mp \ m, 
it follows that Q(Cm) H F = F' by definition of F' . As noted in Section [3l the extension F(( m )/Q 
is Galois with group 

Gal(F(C m )/Q) {(<7i,<7 2 ) G Gal(Q(Cm)/Q) x G : <7i| F , = a 2 | F ,}. (33) 

Let ro : Gal(-F/Q) — > Gal(-F'/Q) be the natural projection given by restriction of automorphisms. 
We first show that [F : F'] = # ker w is odd, which allows us to deduce that C T is not empty. 
For each a G G = Gal(i*YQ), we let C a denote the conjugacy class of a in G. We note that (|33p 
and the Chebotarev Density Theorem together imply that for each a G ker w the density of primes 

p such that p = 1 (mod m) and (^pj = C a is equal to (p *^ jnF = "J^*^ > 0. In particular, 
the trivial automorphism lp € ker to, and so it follows by definition of 2- pretentious that at most 
a density zero subset of the p = 1 (mod m) may split into degree two primes in F. However, if 
[F : F'] = ker w is even, then ker w would contain an element of order 2 and the same argument 
with a replacing 1 p would imply that there is a positive density of p = 1 (mod m) that split into 
degree two primes in F. Therefore, we conclude that [F : F'\ is odd. Now letting a be any element 
of G such that w{a) = a\ F , = r, we find that a^ F]F '^ £ C T , and so C T is not empty. 

Finally, let g G S T be arbitrarily chosen, and let a by any integer such that a = g (mod mp). 
Again using (|33p and the Chebotarev Density Theorem, we see that the density of rational primes 

p satisfying the two conditions p = a (mod m) and (-^p) Q C T is equal to ^=C T /<fp(m)np > 0. 

Since every such prime must split into degree two primes in F and since a was an arbitrary integer 
satisfying the condition a = g (mod mp), it follows from the definition of 2-pretentious that, apart 
from a density zero subset of exceptions, every rational prime p = g (mod mp) must split into 
degree two primes in F. Therefore, if p is any rational prime not ramifying in F and satisfying the 

congruence condition p = g (mod mp), then ( —^^ j = t and (^—^^J = C for some conjugacy class 
C of order two elements in F. Hence, it follows that (™) = C C C T . □ 



11. Proofs of Theorems [6] and 0. 

In this section, we give the proof of Theorem [S] and sketch the alteration in strategy that gives 
the proof of Theorem [71 The main tool in this section is a certain variant of the classical Barban- 
Davenport-Halberstam Theorem. The setup is as follows. Let F/Fq be a Galois extension of number- 
fields, let C be any subset of G&1(F / Fq) that is closed under conjugation, and for any pair of integers 
q and a, define 

OF/F (x;C,q,a) := ^ logNp, 

Np<x 
deg p=l 

(£Z£b)cc 

Np=a (mod q) 

where the sum is taken over the degree one prime ideals p of Fq. If -Fo(Cj) H F = Fo, it follows from 
the ideas discussed in Section [3] that 

VF/F {x;C,q,a) ~ 



"■F<PF (q) 

whenever a G Gf ^. The following is a restatement of the main result of |19 
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Theorem 25. Let M > 0. If x{\ogx)~ M <Q <x, then 

E' E (0F/F o (x;C,q,a) - nFo *° x) 2 « xQlogx, (34) 

where the prime on the outer summation indicates that the sum is to be restricted to those q < Q 
satisfying F Fo(£ q ) = Fq. The constant implied by the symbol <C depends on F and M . 

Proof of Theorem In light of Theorem [3j it suffices to show that 

£ K (x;x/(logx) 12 ,C T ) < X 

(log x) 1L 

for every element r of order dividing two in G&l(K' /Q). 

By assumption, we may decompose the field K as a disjoint compositum, writing K = K1K2, 
where K\ n K2 = Q, K\ is a 2-pretentious Galois extension of Q, and ^2 is totally non-Abelian. 
Let Gi, G2 denote the Galois groups of Ki/Q and K2/Q, respectively. We identify the Galois group 
G = Gal(-fC/Q) with G\ x G2. Since K2 is totally non-Abelian, it follows that G' = G[ x G2, and 
hence K' = K[ and mx = m-Ki ■ Let C22 denote the subset of all order two elements in G2 and let 
Ci jT denote the subset of elements in G\ whose restriction to K' is equal to r. Recalling that every 
element of C T must have order two in G, we find that under the identification G = G\ x G2, we have 

C T = {1} X C 2 ,2 

if |r| = 1 and 

C T = C ltT x (C 2 , 2 U{1}) 

if |r| = 2. Here we have used Proposition [M] with F = K\ and the fact that K' = K[. We now 
break into cases depending on whether r £ Gal(-ftT'/Q) is trivial or not. First, suppose that r is 
trivial. Then for each a S (Z/ 'gwtR-Z)* such that a = b (mod for some & £ 5 T , we have 

6(x;C T ,qm K ,a) -3= V] logp -x 

nKfK{qmK) pT, n K ^ K {qm K ) 

p=a (mod qmjf) 
^)cC r 



1 V- , tvt. #C2,: 



E 1o s n p 



"'m j^j. n K (f Kl (qm Kl ] 

degp=l 
Np=a (mod qmi() 



1 ( a i n \ "Xi#C 2> 2 

^K/KA x ^ C ^^1 m Ki,a) ? tX 

"ifi V n K L PK\ \Q m Ki ) 



Thus, we have that 



£ k(x;x/ (log x) 12 ,Ct) = \- E E ( K/K 1 {x;C2,2,qmK 1 ,a> 



We note that K\{C, qinK ) K = K\ for all q > 1 since is totally non-Abelian. Hence, the result 
follows for this case by applying Theorem 1251 with F$ = K\ and F = K. 

Now, suppose that |r| = 2. Then the condition ( — ^ ) C C T is equivalent to the two conditions 



p 



c Ci >T and ( C C 2 , 2 U {!}. Using Proposition El and the fact that K[ = K', this is 
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equivalent to the two conditions p = b (mod m-n) f° r some b £ S T and y j C C2,2U {!}■ Hence, 
for each a 6 (Z/gm^Z)* such that a = b (mod mj^) for some 6 6 5 r , we have 

6(x;C T ,qm K ,a) -x = 9 K 2 /q(x; C 2 , 2 U {l},g m ^,a) - 1 + — Hzl x 

n K ip K (qm K ) 2/v n K2 <p{qm K ) 



as 



#Cl,T _ n K 1 /n K i i 



Thus, we have that 



^2/0(^5^2,2 U {l},gmK,o) 2 ' 2 x j . 

Here, as well, we have that Q(C 9mir ) H -fT 2 = Q f° r all g > 1 because 2^2 is totally non-Abelian. 
Hence, the result follows for this case by applying Theorem [25] with Fq = Q and i 7 = i^2- D 

Proof Sketch of Theorem^ In order to obtain this result, we change our strategy from the proof 
of Theorem [3] slightly In particular, if K' is ramified only at primes which divide 2r, then it 
follows that Q(Cj) H K = Q whenever (q,2r) = 1. Therefore, we go back to equation (l22l) in the 
proof of Proposition [15] and apply the Chebotarev Density Theorem immediately. Then we use 
Cauchy-Schwarz Theorem 1251 to bound the error in this approximation. □ 

12. Proofs of Lemmas. 

Proof of Lemma[TR It suffices to show that 

(fc,2r)=l (n,2r)=l 

for each g £ S T , where Cf is defined by (|27p . We note that since K is a fixed number field, it 
follows that m.K is fixed. Thus, using Lemma [TBI Lemma [19] and equation ([4]), we have that 

^ 9) ~ E T E T^2T E (-)#^(r,a,n,fc) 

fc<V n<C7 ^ v A ; ae(Z/nZ) x 

(fc,2r)=l (n,2r)=l 

IL| fc #Cf (r,l,l,fc) Cfc („) 
^ 2^ j^fpi 2^ 



(fc,2r)=l (n,2r)=l 

+ 2-> fc2,nCfc , | 2^ 



(fc,2r)=l (n,2r)=l 



n^#cf mm v 1 

^ 2^ fc2,„rfc , > 2^ 



k 2 (p(k) ^— ' K m „(n)(p(n) 

k<V ^ v ' n>U KK ' 

(fc,2r)=l (n,2r)=l 

n„ fe #cf(r, 1,1, fc) ^ 1 



+ 2_> /.--' -.■/,*, 2^ 



, s k 2 tp(k) ^ K mK (n)v9(n)' 

(fc,2r)=l (ra,2r)=l 
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where for any integer N, kn(ji) is the multiplicative function defined by (|32|) . In [5j p. 175], we find 
the bound 

1 



Y — 



Therefore, 



y - = y - < y — L_ y - 



(n,m K )=l g\m=>£\m K 
t\m^i\m K 



Similarly, using Lemma [TBI we have that 



1 x - yjm 1 -r-r / I 

<K VU 4i + (i-i)(VI-i) 

e\m^e\m K 

1 



n^#gf (r,l,l,fc) < mK 2 -( fe ) 



k 2 cp(k) ^-^ m 2 (fi(m) ^-^ k 2 cp(k) 

k>V ^ y ' m>l ^ K ' k>V/m ^ K ' 

(fc,2r)=l e\m^e\m K (k,2rm K )=l 

^ ^ log(V/m) 



< 



4 m 2 (p(m)(y/m 

i\m=>i\m K 

log V v-^ 1 



y2 ^ (m) 

logF 



a.s 



2«(fc) r°° dN (t) logV 

2-^ h 2 m(h\ ~ L ^3 < 



k y kMk) Jy «3 ^ » 



where 



, . v^fc 3 2^ fc ) t ^ k 3 2^/k 2 ip(k) t fv^ 2 1 

^o(t):=> , 9 77T < 1 — :) — *-^<: — rexp<> - — -><Cilogi. 

^ t kMk) logt^ fc log* 

Substituting these bounds into (|35p finishes the proof of the lemma. □ 



Proof of Lemma[TR The multiplicativity of Cfc(n) follows easily by the Chinese Remainder Theorem. 
We now compute Cfe(n) when n = t e is a prime power and \ 2r. 
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If l\ niK, then by Lemma [TH 



E (^y#C^(r,a,e,k) 



(r 2 -ak 2 ,£ e )=l 



1 E 

ae(Z/«) x 



a\ e r — a 



1 + 



r 2 — ak 2 



(36) 



If t | A;, then this last expression gives 

c k (i e ) 



r — ak 



2\ 2 



r — a/c z 



as (fe, r) = 1. If £\h, then ([36]) gives 



r = 2 E (7) =#cf\rAA,k) 



£-1 if 2 I e, 
if 2 f e 



/>e-l ~~ V 



2 \ 2 

r — a 



+ 



r 2 — a 



E 

bez/ez 



r 2 — b 



+ { ~£ 



£-3 if 2 I e, 

"I- (! + (*)) if2 + e - 

Now, we consider the cases when £ \ mx- First, suppose that 1 < v^mx) < 2vi{ti). Then as 
vi{mK) < 2ui(k) < e + 2vi(k) = vi(nk 2 ), we have that 4g 2 = r 2 - ak 2 (mod t^" 1 *)) if and only if 
4g 2 = r 2 (mod l v A mK )). Therefore, 



UMm K ) if 4^2 _ r 2 ( mod ^("if)), 

1 otherwise, 
#Cf (r, 1,1, *0 



for all a G (Z/£ e Z) x . Since £ | it and (fc,r) = 1, it follows that £ \ r 2 - ak 2 for all a G Z/£ e Z. 
Whence, in this case, 

c k (£ e ) 



Qe-l 



l - E mV/W,^) 



(r 2 -afc 2 ,f)=l 

#Cf (r, 1,1, fc) 

aeZ/lZ 



#C^(r , 1, 1, k) 



£-1 if 2 I e, 
if 2 f e. 



Now, suppose that 2vi(k) < v^mx)- We write A: = £ Ue ^ki with (£,ke) = 1, and let t 
min{ i^(mjf), e + 2vi{k)}. Then £ > 2vi(k) and 4g 2 = r 2 — aA; 2 (mod £*) if and only if ak 2 = r ^ { 9 k) 
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(mod l l 2 ^( fe )). Combining this information with Lemma [T8l we have that 



#C^(r,a,f,k) = l lt if^ W |r 2 -Vanda^ = ^ (mod 
[0 otherwise. 

In particular, we see that c k (£ e ) = if r 2 ^ Ag 2 (mod £ 2 ^( fc )). Suppose that r 2 = 4g 2 (mod ^«). 
Since (g, m^) = 1 and £ | m^, we have that 

c k (i e )= £ g) e #Cf (r^,^^) 

(r 2 -afc 2 ,f)=l 

- E (!)> 

ak 2 ^r 2 (mod ^) 
afc 2 =r 2 — 4g 2 (mod £') 



E 



aeZ/£ e Z 
afc 2 =r 2 -4g 2 (mod t l ) 



„2_„„2 



n/r 2 \ 6 

\ nt 



E 

= > E (?)" 

^^riy ( mod £t " 2 ^ (fe) ) 

= ^e- t+ 2„ (fc ) ^ (r 2 -v)/^( fc ) y 

Therefore, in the case that i \ mx and 2vn{k) < v^mx), we have 

f?^ C f (r ,,^)( (r2 - 4 y" w )' 



since 



#cW(r,l,l,fc) 



f^(fc) if r 2 = 4 5 2 (mod £ 2 ^(fc)) 5 
I otherwise. 



□ 
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